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CLAIMS 

1 • An encryption/decryption unit for encrypting 
a p]Naintext into a ciphertext and/or decrypting 
a ciphertext into a plaintext, comprising: 

f\rst encryption/decryption means for performing 
an encryption or decryption process; 

f irst\substitution means for performing data 
substitution\of an output from said first encryption/ 
decryption meaias according to a predetermined 
permutation tabr^ 

second encryfotion/decryption means for performing 
an encryption or decryption process for an output from 
said first substitution means; 

second substitution means for performing data 
substitution of an output from said second encryption/ 
decryption means according to a predetermined 
permutation table; and 

third encryption/decryption means for performing 

\ 

an encryption or decryption process for an output from 



said second substitution means\ 

\ 

2. A unit according to claim 1, wherein said 



first encryption/decryption meansv said third 
encryption/decryption means , said \ irst substitution 
means, and said second substitution Wans are means 
which comply with the same algorithm, 

3. A unit according to claim 1, ^herein said unit 
further comprises key generating means^fW generating 
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intermediate keys respectively supplied to said first, 
second, and third encryption/decryption means and said 
firs^t and second substitution means, and 

said first and second substitution means function 
as identity conversion when the intermediate key 
generated by said key generating means contains 
predetermined data. 

4. A \init according to claim 3, wherein said 
first and thxsrd encryption/decryptiorL_means are means 

10 which comply wVth the same algorithm as that for 

said second encryption/decryption means when the 
intermediate key generated by said key generating means 
contains predetermined data. 

5. A unit according to claim 3, wherein said 
15 second encryption/decryption means-executes a 

decryption process whenV said first and third 
encryption/decryption means perform an encryption 
process, and executes an encryption process when said 
first and third encryption/decryption means executes 
2 0 a decryption process. 

6. A unit according to cl\aim S^wfterein said key 



generating means supplies the same intermediate key to 
said first and third encryption/decryption means. 

7. A unit according to claim 5, wherein said key 
25 generating means supplies intermediate keys that cause 

said first and second encryption/decryption means or 
said second and third encryption/decryption means to 
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comply with the same algorithm and use the same 
encryption/decryption key . 

A computer-readable storage medium storing 
a program for controlling an encryption/decryption unit 
for encrypting a plaintext into a ciphertext and/or 
decryptingya ciphertext into a plaintext, the program, 
comprising: 

first encryption/decryption means for performing 
an encryption ot decryption process; 

first substitution means for performing data 
substitution of anNputput from said first encryption/ 
decryption means according to a predetermined 
permutation table ; 

second encryption/decryption means for performing 
an encryption or decryption process for an output from 
said first substitution means; 

second substitution means for performing data 
substitution of an output froi^said second encryption/ 
decryption means according to a v predetermined 
permutation table; and 

third encryption/decryption means for performing 



\ 



an encryption or decryption process for an output from 
said second substitution means. 

9. A medium according to claim\ 8, wherein said 
medium further comprises key generating means for 
generating intermediate keys respectively supplied to 
said first, second, and third encryptionVdecryption 
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mear^s and said first and second substitution means, and 

said first and second substitution means function 
as identity conversion when the intermediate key 
generated by said key generating means contains 
predetermined data. 

10. A \init according to claim 3, wherein said key 
generating means comprises: 

dividing\means for dividing key data K of a 
predetermined number of bits into a plurality of data 
and storing the ^divided data into respective registers; 

expanded permutation means for reading out the 
divided key data from the respective registers and 
effecting an expanded permutation on the divided key 
data; 

DES-SS key schedule means for generating 
intermediate keys Kl anovK3 from a result of the 
expanded permutation performed by said expanded 
permutation means; 

DES key schedule means \for generating an 



V 



intermediate key K2 from a result of the expanded 
permutation performed by said expanded permutation 
means; and 

substitution schedule means for generating 
intermediate keys KK1 and KK2 from the contents of 
the registers. 

11. A unit according to claim 10 X wherein said 
expanded permutation means comprises^an expanded 
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permutation table for expanding input 5 6 -bit key data 
into\64-bit data. 

12v. A unit according to claim 10, wherein said 
substitution schedule means receives one, of the divided 
key dataVas a 32-bit key, and ou>jJuts^an intermediate 
key KK1 input to said first substitution means and an 
intermediate key KK2 input to said second substitution 
means, said Substitution schedule means comprising: 
first mea^is for directly outputting the input 
32-bit key as ah intermediate key KDl of said first 
substitution meaAs, calculating a logical OR of the 
intermediate key, >and outputting the logical OR as 
an intermediate key\KSl (one bit) of said first 
substitution means; and 

second means for\shifting the input 32-bit key to 
the left to output the\key as an intermediate key KD2 
of said second substitution means, and calculating 
a logical OR of the inte^tiediate key KD2 to output the 
key as an intermediate key v KS2 (one bit) of said second 
substitution means. 



13. A unit according to claim^^ wherein each 
of said first and second substitution means comprises 
an initial permutation section\ an exclusive OR, 
a substitution portion, and an \nverse permutation 
section, and said initial permutation section performs 
bit permutation of a 64-bit input Vnd divides the 
permutation result into 8 blocks each comprising 8 bits, 
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12-bit data comprised of the first four 8-bit 
blocks XDf the output of said initial permutation 
section are directly input to said substitution portion, 
and 32-bit\data comprised of the remaining four blocks 
is exclusiveVoRed with the intermediate key KD, and 
a result of the exclusive-OR operation is output to 
said substitution portion, 

said substitution portion outputs output data 
corresponding to anVLnput using a permutation table 
when the 1-bit key Ks\is at "1", and outputs data 
identical to the input \hen the 1-bit key KS is at " 0' 
and 

said inverse permutation section receives the 



output data from said substitution portion, performs 
bit permutation of the received^data, and outputs the 
data as 64-bit data. 



